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AMENDMENTS TO THE SPKClFICATIOlS f 

Please replace the paragraph that begin at line 21 of page 13 with the following amended 
paragraph: 

Program code means comprising one or more program modules may be stored on the 
mygnciichard disk 139, rcmoyjbjcjnagnelic disk 129, optical disk 131, ROM 124 or RAM 125, 
including an operating system 135, one or more application programs 136, other program 
modules 137, and program data 138. A user may enter commands and information into the 
computer 120 through keyboard 140. pointing device 142, or other input devices (not shown), 
such as a microphone, joy stick, game pad, satellite dish, scanner, or the like. Those and other 
input devices are often connected to the processing unit 121 through a serial port interface 146 
coupled to system bus 123. Alternatively, the input devices may be connected by other 
interfaces, such as a parallel port, a game port or a universal serial bus (USB). A monitor 147 or 
another display device is also connected to system bus 123 via an interface, such as video 
adapter 148. Tn addition to the monitor, personal computers typically include other peripheral 
output devices (not shown), such as speakers and printers. 

Please replace the paragraph that begins on line 9 or page 16 with the following amended 
paragraph: 



The memory device such as memory device 208 thai stores the object may be any 
memory device that the servers 206 have access to. By way of example, the memory device 208 
may include any of the memory device described above for Figure 1 including ROM 124, RAM 
125, removable magnetic disk 129, removable optical disk 131, hawl-majmeiic hj^disk 139 or 
any odicr memory device. In some cases, the memory device 208 may represent multiple 
memory devices as when the object 210 is replicated or cached on several memory devices in 
order to allow the server network more efficient access to the object. The object 210 may 
essentially be any data structure including document files, executable files and so forth. 
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Please replace ihe paragraph lhat begins on line 18 of page 20 wilh the following 
amended paragraph: 



0 



Now lhat the security descriptors arc consistent, any changes to one of Iho security 
descriptors arc replicated to the other security descriptor. Figure 7 illustrates a method -700-for 
replicating changes in security descriptor #1 to security descriptor #2. The data structures 
involved with this replication are shown as they existed at instances or time sequentially 
beginning at Figure 8A and ending at Figure 8C. The method of Figure 7 will now be described 
with reference to the data structures of Figures 8A, 8B and SC. 



Please replace the paragraph that begins on line 18 of page 22 with the following 
amended paragraph: 



The method of Figure 7 is then implemented except that changes to the security 
descriptor #2 are now made to replicated to the security descriptor #1. Specific a lly 7 4«- £ rteiv?+0 v 
the security descriptor #2 that follows the specification #2 is convened into a version of the 
security descriptor #2 lhat follows the specification #1 as shown in Figure 9B. Using the 
mapping rules, right A' maps to right A, the combination of rights CI' and C.2' map to right C, 
right D* maps to right D, and right E' maps to the combination or rights H.1 and E.2 lo form the 
version of the security descriptor #2 lhat follows ihe specification #1. Next, this version is 
compared to the security descriptor #1 that also follows the specification #l to reveal that right C 
is added and right !D is changed to right D. These changes arc then implemented in the security 
descriptor #1 as shown in Figure 9C. 



Please replace the paragraph that begins on line 4 of page 18 wilh the following amended 
paragraph: 




The server network 202 is thus a security heterogenic computer network. In this 
description and in Ihe claims, a network in which different security descriptor specifications are 
used when deiermining security permissions is referred to as a "security heterogenic computer 
network." A security heterogenic computer network may occur when different software is 
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running on the servers within the network. For example, some or the server such as server 206a 
may be running MICROSOFT <S> WINDOWS NT <S> workstation 4.0 or server 4.0 operating 
systems or perhaps MICROSOFT <g> Exchange version 5.5jxmimu.;^^^ Rach of 

these software packages uses the 4.0 security descriptor specification. On the other hanU. other 
servers such as server 206b may be running MICROSOFf ® WINDOWS ® 2000 operating 
system or MICROSOFT © Exchange 2000 communication snf.^n. w M.h usc , hc Acljvc 
Directory security descriptor specification. 
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